Summary
hivex
libguestfs
libguestfs-winsupport
[8.6-1]
- Rebase to ntfs-3g 2021.8.22
- Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289,
CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269,
CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254
resolves: rhbz#2004490
[8.2-1.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)
[8.2]
- Resolves: bz#1810193
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
[8.0-4]
- Rebuild all virt packages to fix RHEL's upgrade path
- Resolves: rhbz#1695587
(Ensure modular RPM upgrade path)
[8.0-3]
- Fix for CVE-2019-9755
(heap-based buffer overflow leads to local root privilege escalation)
resolves: rhbz#1698503
[8.0-2]
- Fix for ntfsclone crash (RHBZ#1601146).
[8.0-1]
- Rebase to 2017.3.23.
- Remove patches which are now upstream.
- Resynch with Fedora package.
- Enable all architectures for RHEL 8.
[7.2-2]
- Fix for handling guest filenames with invalid or incomplete
multibyte or wide characters
resolves: rhbz#1301593
[7.2-1]
- Rebase and rebuild for RHEL 7.2
resolves: rhbz#1240278
[7.1-6]
- Bump version and rebuild.
related: rhbz#1221583
[7.1-5]
- Enable aarch64 architecture.
resolves: rhbz#1221583
[7.1-4]
- Enable debuginfo support and stripping.
resolves: rhbz#1100319
[7.1-3]
- Add patches from Fedora package which add fstrim support.
resolves: rhbz#1100319
[7.1-2]
- New package for RHEL 7.1
- Rebase to ntfs-3g 2014.2.15
resolves: rhbz#1100319
- Change the package so it works with supermin5.
- Remove dependency on external FUSE.
[7.0-2]
- Resync against Rawhide package (ntfs-3g 2013.1.13).
- Drop HAL file since HAL is dead.
resolves: rhbz#819939
[7.0-1]
- New package for RHEL 7
resolves: rhbz#819939
- Resync against Rawhide package.
[1.0-7]
- Disable debuginfo package.
resolves: RHBZ#691555.
[1.0-6]
- Require libguestfs 1.7.17 (newer version in RHEL 6.1).
- Require febootstrap-supermin-helper instead of febootstrap
resolves: RHBZ#670299.
[1.0-5]
- Make sure intermediate lib* directories are created in hostfiles (RHBZ#603429)
[1.0-4]
- Requires fuse-libs (RHBZ#599300).
[1.0-3]
- ExclusiveArch x86_64.
[1.0-2]
- Package Windows support for libguestfs.
libiscsi
libnbd
[1.6.0-5.el8]
- Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails
resolves: rhbz#2045718
[1.6.0-4.el8]
- Resolves: bz#2000225
(Rebase virt:rhel module:stream based on AV-8.6)
[1.2.2]
- Resolves: bz#1844296
(Upgrade components in virt:rhel module:stream for RHEL-8.3 release)
[1.2.2-1]
- New stable release 1.2.2.
[1.2.1-1]
- New stable release 1.2.1.
[1.2.0-1]
- New stable release 1.2.0.
[1.0.3-1]
- New upstream version 1.0.3.
- Contains fix for remote code execution vulnerability.
- Add new libnbd-security(3) man page.
[1.0.2-1]
- New upstream version 1.0.2.
- Remove patches which are upstream.
- Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
- Fix previous commit message.
[1.0.1-2]
- Add upstream patch to fix nbdsh (for nbdkit tests).
- Fix interop tests on slow machines.
[1.0.1-1]
- New stable version 1.0.1.
[1.0.0-1]
- New upstream version 1.0.0.
[0.9.9-2]
- Rebuilt for Python 3.8
[0.9.9-1]
- New upstream version 0.9.9.
[0.9.8-4]
- Fix nbdkit dependencies so we're actually running the tests.
- Add glib2-devel BR so we build the glib main loop example.
- Add upstream patch to fix test error:
nbd_connect_unix: getlogin: No such device or address
- Fix test failure on 32 bit.
[0.9.8-3]
- Bump and rebuild to fix releng brokenness.
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/
[0.9.8-2]
- Rebuilt for Python 3.8
[0.9.8-1]
- New upstream version 0.9.8.
- Package the new nbd_*(3) man pages.
[0.9.7-1]
- New upstream version 0.9.7.
- Add libnbd-ocaml(3) man page.
[0.9.6-2]
- Add all upstream patches since 0.9.6 was released.
- Package the ocaml bindings into a subpackage.
[0.9.6-1]
- New upstream verison 0.9.6.
[0.1.9-1]
- New upstream version 0.1.9.
[0.1.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
[0.1.8-1]
- New upstream version 0.1.8.
[0.1.7-1]
- New upstream version 0.1.7.
[0.1.6-1]
- New upstream version 0.1.6.
[0.1.5-1]
- New upstream version 0.1.5.
[0.1.4-1]
- New upstream version 0.1.4.
[0.1.2-2]
- Enable libxml2 for NBD URI support.
[0.1.2-1]
- New upstream version 0.1.2.
[0.1.1-1]
- Fix license in man pages and examples.
- Add nbdsh(1) man page.
- Include the signature and keyring even if validation is disabled.
- Update devel subpackage license.
- Fix old FSF address in Python tests.
- Filter Python provides.
- Remove executable permission on the tar.gz.sig file.
- Initial release.
libtpms
[0.9.1-0.20211126git1ff6fe1f43]
- Rebase to 0.9.1 (sync with RHEL9)
Resolves: rhbz#2029355
[0.7.4-6.20201106git2452a24dab]
- Fix CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
Resolves: rhbz#1999307
[0.7.4-5.20201106git2452a24dab]
- Fix CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
Fixes: rhbz#1976816
[0.7.4-4.20201106git2452a24dab]
- tpm2: CryptSym: fix AES output IV
Fixes: rhbz#1942904
[0.7.4-3.20201106git2452a24dab]
- Add git as build dependency
Related: rhbz#1858821
[0.7.4-2.20201106git2452a24dab]
- tpm2: Return properly sized array for b parameter for NIST P521 (HLK) #180
Fixes: rhbz#1858821
[0.7.4-1.20201106git2452a24dab]
- Follow stable-0.7.0 branch to v0.7.4 with security-related fixes.
Fixes: rhbz#1893444
[0.7.3-1.20200818git1d392d466a]
- Update to v0.7.3 stable, fixes rhbz#1868447
- (includes 'tpm2: fix PCRBelongsTCBGroup for PCClient')
[0.7.2-1.20200527git7325acb477]
- Update to v0.7.2 stable snapshot, fixes rhbz#1809676
- exclude i686 build
- Following stable-0.7.0 branch for TPM 2 related fixes: RSA decryption,
PSS salt length, symmetric decryption (padding)
- Under certain circumstances an RSA decryption could cause a buffer
Fixed packages 119
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | hivex | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | hivex-devel | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-appliance | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-bash-completion | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-devel | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-gfs2 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-gobject | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-gobject-devel | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-inspect-icons | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-java | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-java-devel | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-javadoc | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-man-pages-ja | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-man-pages-uk | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-rescue | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-rsync | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-tools | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-tools-c | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-winsupport | 0:8.6-1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libguestfs-xfs | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libiscsi | 0:1.18.0-8.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libiscsi-devel | 0:1.18.0-8.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libiscsi-utils | 0:1.18.0-8.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libnbd | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libnbd-bash-completion | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libnbd-devel | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libtpms | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libtpms-devel | 0:0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-client | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-config-network | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-config-nwfilter | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-interface | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-network | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-nodedev | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-nwfilter | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-qemu | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-secret | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-core | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-disk | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-gluster | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-iscsi-direct | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-logical | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-mpath | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-rbd | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-driver-storage-scsi | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-daemon-kvm | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-dbus | 0:1.3.0-2.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-devel | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-docs | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-libs | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-lock-sanlock | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-nss | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | libvirt-wireshark | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | lua-guestfs | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdfuse | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-bash-completion | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-basic-filters | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-basic-plugins | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-curl-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-devel | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-example-plugins | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-gzip-filter | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-gzip-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-linuxdisk-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-nbd-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-python-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-server | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-ssh-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-tar-filter | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-tar-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-tmpdisk-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-vddk-plugin | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | nbdkit-xz-filter | 0:1.24.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | netcf | 0:0.2.8-12.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | netcf-devel | 0:0.2.8-12.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | netcf-libs | 0:0.2.8-12.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | perl-hivex | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | perl-Sys-Guestfs | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | perl-Sys-Virt | 0:6.0.0-1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | python3-hivex | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | python3-libguestfs | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | python3-libnbd | 0:1.6.0-5.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | python3-libvirt | 0:7.10.0-4.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-guest-agent | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-img | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-block-curl | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-block-gluster | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-block-iscsi | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-block-rbd | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-block-ssh | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-common | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-kvm-core | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | qemu-virtiofsd | 15:6.1.1-9.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | ruby-hivex | 0:1.3.18-23.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | ruby-libguestfs | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | seabios | 0:1.15.0-2.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | seabios-bin | 0:1.15.0-2.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | seavgabios-bin | 0:1.15.0-2.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | sgabios | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | sgabios-bin | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | supermin | 0:5.2.1-1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | supermin-devel | 0:5.2.1-1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | swtpm | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | swtpm-devel | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | swtpm-libs | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | swtpm-tools | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | swtpm-tools-pkcs11 | 0:0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | virt-dib | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | virt-v2v | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | virt-v2v-bash-completion | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | virt-v2v-man-pages-ja | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
| Oracle Linux · 8 | virt-v2v-man-pages-uk | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 |
Vulnerabilities 18
-
High 8.8
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA tr…
-
High 8.2
Qemu: virtio: dma reentrancy issue leads to double free vulnerability
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to…
-
High 7.8
A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the Q…
-
Medium 6.5
Qemu: vnc: null pointer dereference in qemu_clipboard_request()
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL …
-
Medium 6.4
Qemu: improper ide controller reset can lead to mbr overwrite
A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual disk (vdiskL2) stored…
-
Medium 6.2
Libvirt: stack use-after-free in virnetclientioeventloop()
A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop() method, the `data` pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOE…
-
Medium 6.0
Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.
-
Medium 6.0
Out-of-bounds read information disclosure vulnerability
A heap out-of-bounds memory read flaw was found in the virtual nvme device in QEMU. The QEMU process does not validate an offset provided by the guest before computing a host heap pointer, which is used for copying data back to the guest. Arbitrary heap memor…
-
Medium 6.0
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRI…
-
Medium 6.0
Qemu: sdhci: heap buffer overflow in sdhci_write_dataport()
A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash t…
-
Medium 5.5CVE-2024-1441 Public exploit
Libvirt: off-by-one error in udevlistinterfacesbystatus()
An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an u…
-
Medium 5.5
Qemu-kvm: net: assertion failure in update_sctp_checksum()
A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a den…
-
Medium 5.3
An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where…
-
Medium 4.9
Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could …
-
Unscored —
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_b…
-
Unscored —
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Point…
-
Unscored —
QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for wh…
-
Unscored —
QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate…